SMS_EndpointProtectionThreatData Server WMI Class

 

Updated: November 1, 2013

Applies To: System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP1, System Center 2012 R2 Configuration Manager

The SMS_EndpointProtectionThreatData Windows Management Instrumentation (WMI) class is an SMS Provider server class, in Configuration Manager, that represents Microsoft official threats. This is a metadata table/view and all data is extracted from the signature update.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties.

Class SMS_EndpointProtectionThreatData : SMS_BaseClass
{
    UInt32 DefaultActionID;
    UInt32 IsAV;
    String Name;
    UInt64 ThreatID;
    UInt32 VersionFirstUpdated;
};

The SMS_EndpointProtectionThreatData class does not define any methods.

DefaultActionID

Data type: UInt32

Access type: Read/Write

Qualifiers: none

Identifier of the action the EndPoint Protection agent will take for this particular threat.

0

Recommend

2

Quarantine

3

Remove

6

Allow

IsAV

Data type: UInt32

Access type: Read/Write

Qualifiers: none

Is Antimalware or Antispyware.  

Name

Data type: String

Access type: Read/Write

Qualifiers: none

Threat name.

ThreatID

Data type: UInt64

Access type: Read/Write

Qualifiers: [key]

Threat identifier.

VersionFirstUpdated

Data type: UInt32

Access type: Read/Write

Qualifiers: none

Signature version.

Show: